BaselineWatch
Desk

VER-EVA-AIA Assume It's Automatable

FedRAMP Consolidated Rules (2026) 2026.07.14.01
All changes in this version
first version loaded VER: Vulnerability Evaluation and Reporting

Title

Assume It's Automatable

Control

Providers MUST assume the exploitation of vulnerabilities can be automated UNLESS they have evidence proving otherwise.